What is encryption?

Encryption is a method of scrambling a message during transmission with a special key so that only the keyholders can decrypt and read the message.

What makes our service secure is that your web browser encrypts the contents of your links before uploading to the server. Sharing links securely is made easy because your web browser assembles the link using a method that never sends the password to the server without your visitors having to enter the key manually. Their web browser will see the URL "hash" component and use that to decrypt the message.

Is encryption secure?

Binbox relies upon the Stanford Javascript Crypto Library for encryption found here:

http://bitwiseshiftleft.github.io/sjcl/

SJCL is secure. It uses the industry-standard AES algorithm at 128, 192 or 256 bits; the SHA256 hash function; the HMAC authentication code; the PBKDF2 password strengthener; and the CCM and OCB authenticated-encryption modes. Just as importantly, the default parameters are sensible: SJCL strengthens your passwords by a factor of 1000 and salts them to protect against rainbow tables, and it authenticates every message it sends to prevent it from being modified. We believe that SJCL provides the best security which is practically available in Javascript.